jupsupply[.]com

PhishDestroy investigated jupsupply.com, a domain engaged in a brand impersonation phishing campaign targeting Google users. The domain is now offline, but it posed a significant threat by mimicking Google's login interface to harvest credentials. Registered on October 27, 2025, through Tucows Domains Inc., this domain resolved to IP 188.114.97.3 and lacked any SSL certificate, a major red flag for phishing.

Security analysis revealed that jupsupply.com was flagged by 13 of 95 VirusTotal security vendors, indicating widespread detection. It appeared on two security blocklists, and its trust scores were critically low. The domain’s rapid registration and short lifespan are consistent with phishing infrastructure designed for quick takedowns. No legitimate Google service would use this domain or lack HTTPS.

As the domain is currently offline, immediate risk to users is low. However, PhishDestroy recommends that users who may have interacted with this domain change their Google passwords and enable two-factor authentication. Organizations should block the domain and associated IP at the network level and educate users about verifying URLs before entering credentials.